Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-09-27 Thread Richard W.M. Jones
On Mon, Sep 27, 2021 at 04:18:34PM -0500, Eric Blake wrote: > On Fri, Jul 23, 2021 at 11:33:03AM +0100, Richard W.M. Jones wrote: > > Under SELinux, Unix domain sockets have two labels. One is on the > > disk and can be set with commands such as chcon(1). There is a > > different label stored in

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-09-27 Thread Eric Blake
On Fri, Jul 23, 2021 at 11:33:03AM +0100, Richard W.M. Jones wrote: > Under SELinux, Unix domain sockets have two labels. One is on the > disk and can be set with commands such as chcon(1). There is a > different label stored in memory (called the process label). This can > only be set by the

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-09-27 Thread Daniel P . Berrangé
On Wed, Aug 25, 2021 at 02:35:04PM -0500, Eric Blake wrote: > On Fri, Jul 23, 2021 at 05:38:06PM +0100, Daniel P. Berrangé wrote: > > On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: > > > Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > > > > Under SELinux, Unix domain

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-09-27 Thread Vladimir Sementsov-Ogievskiy
24.09.2021 22:23, Eric Blake wrote: Ping On Wed, Aug 25, 2021 at 02:35:04PM -0500, Eric Blake wrote: On Fri, Jul 23, 2021 at 05:38:06PM +0100, Daniel P. Berrangé wrote: On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben:

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-09-24 Thread Eric Blake
Ping On Wed, Aug 25, 2021 at 02:35:04PM -0500, Eric Blake wrote: > On Fri, Jul 23, 2021 at 05:38:06PM +0100, Daniel P. Berrangé wrote: > > On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: > > > Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > > > > Under SELinux, Unix

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-08-25 Thread Eric Blake
On Fri, Jul 23, 2021 at 05:38:06PM +0100, Daniel P. Berrangé wrote: > On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: > > Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > > > Under SELinux, Unix domain sockets have two labels. One is on the > > > disk and can be set with

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-07-26 Thread Eric Blake
On Fri, Jul 23, 2021 at 11:47:51AM +0100, Daniel P. Berrangé wrote: > On Fri, Jul 23, 2021 at 11:33:03AM +0100, Richard W.M. Jones wrote: > > Under SELinux, Unix domain sockets have two labels. One is on the > > disk and can be set with commands such as chcon(1). There is a > > different label

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Daniel P . Berrangé
On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: > Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > > Under SELinux, Unix domain sockets have two labels. One is on the > > disk and can be set with commands such as chcon(1). There is a > > different label stored in memory

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Richard W.M. Jones
On Fri, Jul 23, 2021 at 06:18:55PM +0200, Kevin Wolf wrote: > Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > > Under SELinux, Unix domain sockets have two labels. One is on the > > disk and can be set with commands such as chcon(1). There is a > > different label stored in memory

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Kevin Wolf
Am 23.07.2021 um 12:33 hat Richard W.M. Jones geschrieben: > Under SELinux, Unix domain sockets have two labels. One is on the > disk and can be set with commands such as chcon(1). There is a > different label stored in memory (called the process label). This can > only be set by the process

Re: [PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Daniel P . Berrangé
On Fri, Jul 23, 2021 at 11:33:03AM +0100, Richard W.M. Jones wrote: > Under SELinux, Unix domain sockets have two labels. One is on the > disk and can be set with commands such as chcon(1). There is a > different label stored in memory (called the process label). This can > only be set by the

[PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Richard W.M. Jones
Under SELinux, Unix domain sockets have two labels. One is on the disk and can be set with commands such as chcon(1). There is a different label stored in memory (called the process label). This can only be set by the process creating the socket. When using SELinux + SVirt and wanting qemu to

[PATCH v2] nbd/server: Add --selinux-label option

2021-07-23 Thread Richard W.M. Jones
v1 was here: https://lists.nongnu.org/archive/html/qemu-block/2021-07/threads.html#00713 v2 adds the changes to CI docker files as suggested by Dan Berrange in his review. Rich.